Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.mft
File: 2nVBcltyi1qJ87-vIPh2VWPC8_s.mft (raw, json)
Hash identifier: IqnXuxrQ0LA2xw3isJepb/P5BA7rVn5SfXZjyIqvYWs=
Subject key identifier: 2C:7F:25:74:B2:EF:55:29:B3:E9:AE:7C:E7:8F:B5:65:5F:AE:90:46
Authority key identifier: DA:75:41:72:5B:72:8B:5A:89:F3:BF:AF:20:F8:76:55:63:C2:F3:FB
Certificate issuer: /CN=da7541725b728b5a89f3bfaf20f8765563c2f3fb
Certificate serial: 01A13DB893BC7238D541D319EC3BBBBD8F56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nVBcltyi1qJ87-vIPh2VWPC8_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.mft
Manifest number: 1AA0
Signing time: Thu 15 Oct 2026 04:01:08 +0000
Manifest this update: Thu 15 Oct 2026 04:01:08 +0000
Manifest next update: Fri 16 Oct 2026 04:01:08 +0000
Files and hashes: 1: 2nVBcltyi1qJ87-vIPh2VWPC8_s.crl (hash: +AFFrfAzTExoy6axpnMgXCcwEf8AvGxhy++ilwvDQB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/2nVBcltyi1qJ87-vIPh2VWPC8_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b8:93:bc:72:38:d5:41:d3:19:ec:3b:bb:bd:8f:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7541725b728b5a89f3bfaf20f8765563c2f3fb
Validity
Not Before: Oct 15 04:01:08 2026 GMT
Not After : Oct 16 04:01:08 2026 GMT
Subject: CN=2c7f2574b2ef5529b3e9ae7ce78fb5655fae9046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8c:92:92:49:e7:1a:9b:c3:fb:33:83:6e:e2:
c0:18:dd:b4:26:10:58:eb:4c:30:d5:af:9a:0e:9e:
00:25:c3:00:51:e7:36:22:cb:1d:e5:fa:ca:93:cd:
66:a3:a0:c0:fe:d3:48:00:25:8f:1a:83:e2:a3:2f:
de:21:3b:96:6d:2f:e5:26:50:4b:c5:85:e3:91:90:
b7:5b:9f:52:8d:93:93:f5:c7:a9:dc:f4:a2:34:44:
2b:f3:14:b3:0e:33:09:bb:3c:91:52:87:de:f5:0d:
40:8b:9d:65:5f:ea:68:9e:33:9d:d7:bc:96:7a:c4:
00:55:7e:01:56:bc:9a:da:50:af:6c:6d:bf:a6:5d:
0e:21:0e:73:1e:03:3a:35:50:fe:39:25:c3:c2:b1:
c3:8a:a0:7f:f3:6b:7c:cc:fa:fd:8c:9e:43:65:3e:
ca:d3:93:3a:6d:30:ed:27:cc:f0:bc:d6:b2:66:15:
5d:b3:aa:2b:75:7b:f8:52:6d:72:47:f5:35:48:5a:
e9:df:98:00:c4:e3:e7:49:e9:be:ff:73:ce:b7:ff:
ca:77:42:0f:04:d4:59:77:7c:dd:6a:a4:9e:70:af:
8d:1f:a3:bb:95:aa:bb:24:78:8f:36:b5:21:bc:47:
eb:b9:50:fc:8e:cc:29:8e:5f:69:62:11:a7:87:77:
7c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:7F:25:74:B2:EF:55:29:B3:E9:AE:7C:E7:8F:B5:65:5F:AE:90:46
X509v3 Authority Key Identifier:
keyid:DA:75:41:72:5B:72:8B:5A:89:F3:BF:AF:20:F8:76:55:63:C2:F3:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nVBcltyi1qJ87-vIPh2VWPC8_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:f6:85:4e:90:20:6d:c9:6f:51:b6:97:9c:35:21:05:37:4a:
53:fa:cf:1a:36:47:ee:5a:37:b6:83:98:7d:89:2b:07:6e:86:
f0:ac:34:ff:2f:6e:f9:e1:63:db:d5:2d:d9:fe:55:45:b7:b1:
a8:74:a1:f1:33:76:43:3c:9a:b2:e9:fb:0d:c3:74:7e:c5:f4:
8b:40:36:9a:4e:a6:76:70:21:28:34:c8:d5:1b:18:91:a7:2e:
31:4f:7f:ce:1e:0e:a1:8f:a5:40:93:57:ec:55:63:f4:7e:19:
ac:74:f0:7a:f2:e2:c4:9e:35:65:f8:9e:ca:18:3d:57:e6:71:
19:be:a3:a9:f5:7e:14:aa:c1:8c:ee:7b:b3:42:9c:c3:ad:8e:
9f:52:99:8c:48:86:89:ba:6c:14:69:1b:02:d0:fc:22:e9:c2:
08:8f:9a:fe:93:4a:ee:67:6c:a9:a2:82:d2:25:e1:3e:0d:fb:
3b:bd:1e:43:f0:57:22:ba:c1:93:04:3f:34:03:6c:da:a1:9a:
b9:e1:27:00:f4:02:eb:b9:d4:0a:2b:09:ef:71:ad:16:94:f3:
1f:aa:ef:03:30:0a:1a:f2:af:92:45:5a:3e:7d:8f:59:bf:6f:
d0:33:a4:1a:9e:9c:be:82:27:f0:33:d1:41:c6:b2:26:15:f0:
77:e9:94:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:31:05 2026 by rpki-client